Overview

overview

7

Static

static

3

d1c85648be...fe.exe

windows7-x64

7

d1c85648be...fe.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1c85648be1c7edcd511fe27a8ed34ebb178a72b11e2a58ef81d84b4f316b6fe

  • Size

    15.6MB

  • Sample

    230821-c2afgaac98

  • MD5

    7f05d5349410fd9a46c96a2d21378ac3

  • SHA1

    e2c962cfe695503dc8c6f82d8986738503b7fb38

  • SHA256

    d1c85648be1c7edcd511fe27a8ed34ebb178a72b11e2a58ef81d84b4f316b6fe

  • SHA512

    59b5e67b1e5deb43c5936002040d9ff8a1453ddb8ae115a80cdba9a66281d4f9824b8a22d84fb8dfe32460a93b484d95f57978995e7f01a793fc54fee9c9a40e

  • SSDEEP

    393216:9OhUh8cB7XqbwdTf+6EWCgGlYr/8RIkVJUpqxO0QJC:omabwdTf+5li2bJUpt0R

Score
7/10
upx

Malware Config

Targets

    • Target

      d1c85648be1c7edcd511fe27a8ed34ebb178a72b11e2a58ef81d84b4f316b6fe

    • Size

      15.6MB

    • MD5

      7f05d5349410fd9a46c96a2d21378ac3

    • SHA1

      e2c962cfe695503dc8c6f82d8986738503b7fb38

    • SHA256

      d1c85648be1c7edcd511fe27a8ed34ebb178a72b11e2a58ef81d84b4f316b6fe

    • SHA512

      59b5e67b1e5deb43c5936002040d9ff8a1453ddb8ae115a80cdba9a66281d4f9824b8a22d84fb8dfe32460a93b484d95f57978995e7f01a793fc54fee9c9a40e

    • SSDEEP

      393216:9OhUh8cB7XqbwdTf+6EWCgGlYr/8RIkVJUpqxO0QJC:omabwdTf+5li2bJUpt0R

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks